Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
File: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft (raw, json)
Hash identifier: rogfprmoxDVXCsjYfgr6Ys2XZg+gZfuNK5bnjiirGRs=
Subject key identifier: DC:1E:8E:EB:E4:A5:DD:64:FE:23:05:AB:C9:B8:63:53:8A:18:25:AF
Authority key identifier: D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
Certificate issuer: /CN=d90155c51ff2394da784a384aa717c76e3032c24
Certificate serial: 01984964E7428FEA4765F2D92A475955B2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
Manifest number: 0DFE
Signing time: Sun 27 Jul 2025 01:00:06 +0000
Manifest this update: Sun 27 Jul 2025 01:00:06 +0000
Manifest next update: Mon 28 Jul 2025 01:00:06 +0000
Files and hashes: 1: 2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl (hash: OwsUo/EboaUemum7eX1UuUzMyVthaljjDpnZMhediHE=)
2: L4roRdlkRFF_L_7wYpfaNa1dLaA.roa (hash: KuAnzPBgxp55/NCR6oySR+pQEyeN2HDAB6NF7tBzr6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:e7:42:8f:ea:47:65:f2:d9:2a:47:59:55:b2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90155c51ff2394da784a384aa717c76e3032c24
Validity
Not Before: Jul 27 01:00:06 2025 GMT
Not After : Jul 28 01:00:06 2025 GMT
Subject: CN=dc1e8eebe4a5dd64fe2305abc9b863538a1825af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:9d:01:be:f6:96:ce:21:c6:56:26:45:c9:
f5:2c:b3:1f:44:9e:f7:c5:03:39:3f:15:02:14:62:
24:13:a8:e1:a1:26:42:e1:1e:e1:53:41:75:0e:9c:
66:a1:e4:a7:e7:40:0c:8d:0c:5c:64:fc:0e:52:ed:
b6:34:6f:4b:bb:96:22:bd:16:d9:8e:70:8e:3d:cd:
f8:41:a8:08:2a:62:96:9e:4a:64:2e:9c:56:64:b5:
45:f9:35:4e:02:87:91:21:04:77:a1:a8:da:4d:93:
50:13:39:39:0b:40:01:8a:d5:b0:28:b6:32:6f:53:
95:f1:b1:e2:56:b7:cc:71:98:a2:61:1c:ee:ce:9a:
8e:ea:73:ee:77:3f:44:33:ca:23:1f:be:0a:98:ad:
b5:83:8a:2e:f2:72:c6:c5:00:f3:d8:d6:b6:d0:01:
c8:8f:96:4a:95:e4:3c:7c:2c:e4:f2:b2:e3:4e:47:
9c:50:48:58:69:0b:61:3e:64:b9:43:ba:37:66:95:
22:a2:cc:8e:1d:37:c7:04:0c:aa:e0:59:3e:97:30:
0a:41:d2:a4:b1:70:76:d1:29:ac:22:35:2a:d8:63:
f8:b1:1b:7f:24:a2:6d:67:08:23:e7:45:34:a7:bf:
01:6d:d5:8c:a4:4f:0e:c6:07:8b:48:24:9c:ad:1d:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1E:8E:EB:E4:A5:DD:64:FE:23:05:AB:C9:B8:63:53:8A:18:25:AF
X509v3 Authority Key Identifier:
keyid:D9:01:55:C5:1F:F2:39:4D:A7:84:A3:84:AA:71:7C:76:E3:03:2C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QFVxR_yOU2nhKOEqnF8duMDLCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec12c-5f18-48ab-b006-422bb43753be/1/2QFVxR_yOU2nhKOEqnF8duMDLCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:09:23:0c:85:29:86:0d:7f:3c:22:f7:dd:c5:c6:fc:0c:01:
5e:a2:8c:17:fc:78:fa:b1:1d:43:65:cb:08:1b:a8:ae:2e:f1:
c8:7e:ca:b4:a5:96:59:da:2a:f6:ab:aa:fd:49:1e:e7:5f:97:
5f:6e:70:14:74:ae:13:96:59:84:2d:e0:52:a4:72:82:ae:63:
b0:27:35:8a:90:f8:7e:da:aa:9f:c4:cb:91:23:b1:b7:4b:06:
ac:b2:75:57:0d:d8:7e:4a:ea:ca:65:b9:8c:ea:ba:69:ef:f6:
9a:02:90:5c:e7:1e:3d:d5:b9:29:82:da:1a:2d:df:c3:c4:0e:
ae:40:c5:98:32:ad:7a:95:71:b8:94:ab:ea:91:41:b6:7e:05:
85:dc:ae:e5:77:b7:97:5b:f3:1c:f2:9c:aa:38:b7:fb:01:1f:
be:81:ad:21:69:9d:46:13:20:fb:ba:cd:4a:ce:51:28:58:a2:
1c:0d:2a:f5:0b:5b:42:6a:d4:14:53:8e:77:fa:42:0d:34:ed:
92:fd:ea:d7:41:2c:ab:30:ff:d0:c8:ff:32:ce:59:12:52:a0:
7a:70:83:c9:be:a8:76:ad:14:02:8b:c8:c4:6a:12:bd:e1:93:
51:04:05:53:25:af:40:30:a7:52:84:2f:24:90:cb:41:f3:fd:
90:9f:fe:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZOdCj+pHZfLZKkdZVbLhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDE1NWM1MWZmMjM5NGRhNzg0YTM4NGFhNzE3Yzc2ZTMw
MzJjMjQwHhcNMjUwNzI3MDEwMDA2WhcNMjUwNzI4MDEwMDA2WjAzMTEwLwYDVQQD
EyhkYzFlOGVlYmU0YTVkZDY0ZmUyMzA1YWJjOWI4NjM1MzhhMTgyNWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xydAb72ls4hxlYmRcn1LLMfRJ73
xQM5PxUCFGIkE6jhoSZC4R7hU0F1DpxmoeSn50AMjQxcZPwOUu22NG9Lu5YivRbZ
jnCOPc34QagIKmKWnkpkLpxWZLVF+TVOAoeRIQR3oajaTZNQEzk5C0ABitWwKLYy
b1OV8bHiVrfMcZiiYRzuzpqO6nPudz9EM8ojH74KmK21g4ou8nLGxQDz2Na20AHI
j5ZKleQ8fCzk8rLjTkecUEhYaQthPmS5Q7o3ZpUiosyOHTfHBAyq4Fk+lzAKQdKk
sXB20SmsIjUq2GP4sRt/JKJtZwgj50U0p78BbdWMpE8OxgeLSCScrR0JYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwejuvkpd1k/iMFq8m4Y1OKGCWvMB8GA1UdIwQY
MBaAFNkBVcUf8jlNp4SjhKpxfHbjAywkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYt
NDIyYmI0Mzc1M2JlLzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kZWMxMmMtNWYxOC00OGFiLWIwMDYtNDIyYmI0Mzc1M2Jl
LzEvMlFGVnhSX3lPVTJuaEtPRXFuRjhkdU1ETENRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAkjDIUp
hg1/PCL33cXG/AwBXqKMF/x4+rEdQ2XLCBuori7xyH7KtKWWWdoq9quq/Uke51+X
X25wFHSuE5ZZhC3gUqRygq5jsCc1ipD4ftqqn8TLkSOxt0sGrLJ1Vw3YfkrqymW5
jOq6ae/2mgKQXOcePdW5KYLaGi3fw8QOrkDFmDKtepVxuJSr6pFBtn4Fhdyu5Xe3
l1vzHPKcqji3+wEfvoGtIWmdRhMg+7rNSs5RKFiiHA0q9QtbQmrUFFOOd/pCDTTt
kv3q10EsqzD/0Mj/Ms5ZElKgenCDyb6odq0UAovIxGoSveGTUQQFUyWvQDCnUoQv
JJDLQfP9kJ/+vw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:31 2025 by rpki-client